ID de Prueba:	1.3.6.1.4.1.25623.1.0.100696
Categoría:	Web application abuses
Título:	MoinMoin 'PageEditor.py' Cross-Site Scripting Vulnerability
Resumen:	MoinMoin is prone to a cross-site scripting vulnerability because it; fails to sufficiently sanitize user-supplied input data.
Descripción:	Summary: MoinMoin is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied input data. Vulnerability Impact: An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks. Affected Software/OS: MoinMoin 1.9.2 and prior are vulnerable. Solution: Updates are available. Please see the references for more information. CVSS Score: 4.3 CVSS Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2010-2969 BugTraq ID: 40549 http://www.securityfocus.com/bid/40549 Debian Security Information: DSA-2083 (Google Search) http://www.debian.org/security/2010/dsa-2083 http://marc.info/?l=oss-security&m=127799369406968&w=2 http://marc.info/?l=oss-security&m=127809682420259&w=2 http://secunia.com/advisories/40836 http://www.vupen.com/english/advisories/2010/1981 Common Vulnerability Exposure (CVE) ID: CVE-2010-2970 Common Vulnerability Exposure (CVE) ID: CVE-2010-2487 40549 40836 ADV-2010-1981 DSA-2083 [oss-security] 20100701 CVE request: moin multiple XSS [oss-security] 20100702 Re: CVE request: moin multiple XSS http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=584809 http://hg.moinmo.in/moin/1.7/rev/37306fba2189 http://hg.moinmo.in/moin/1.8/raw-file/1.8.8/docs/CHANGES http://hg.moinmo.in/moin/1.8/rev/4238b0c90871 http://hg.moinmo.in/moin/1.9/raw-file/1.9.3/docs/CHANGES http://hg.moinmo.in/moin/1.9/rev/68ba3cc79513 http://hg.moinmo.in/moin/1.9/rev/e50b087c4572 http://moinmo.in/MoinMoinBugs/1.9.2UnescapedInputForThemeAddMsg http://moinmo.in/MoinMoinRelease1.8 http://moinmo.in/MoinMoinRelease1.9 http://moinmo.in/SecurityFixes
Copyright	Copyright (C) 2010 Greenbone AG

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.